Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/3JeeBL9hIY6K6ZAT-RMEIQyRJHw.roa
File: 3JeeBL9hIY6K6ZAT-RMEIQyRJHw.roa (raw, json)
Hash identifier: 8nlT6Ih+x6yO+/CHZBRH9+BuTXNKbUWS22NTUx7ZAdo=
Subject key identifier: DC:97:9E:04:BF:61:21:8E:8A:E9:90:13:F9:13:04:21:0C:91:24:7C
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 0186BB7965260F1E695463FB0B52EB83D0E5
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/3JeeBL9hIY6K6ZAT-RMEIQyRJHw.roa
Signing time: Tue 07 Mar 2023 09:49:00 +0000
ROA not before: Tue 07 Mar 2023 09:49:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208476
IP address blocks: 194.147.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:79:65:26:0f:1e:69:54:63:fb:0b:52:eb:83:d0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Mar 7 09:49:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc979e04bf61218e8ae99013f91304210c91247c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7e:1a:7e:3f:d7:5f:63:2f:10:5e:7b:54:8f:
9e:4b:a6:a7:c7:0a:64:0e:b9:62:b4:42:86:2e:34:
d4:74:2e:2e:fe:8d:9b:ee:1c:21:27:ba:31:1a:a7:
e4:a3:64:1e:08:fc:ff:9c:b1:97:96:a4:27:b5:10:
54:0f:bc:d1:22:59:1a:6c:1e:a9:54:29:31:99:05:
b3:40:4d:8c:33:6e:1d:fe:31:7c:eb:9b:74:b4:d4:
fb:ff:f9:fe:65:48:4c:80:c5:3b:f3:91:50:fe:5a:
d1:5a:71:b3:6e:94:a9:28:48:0f:60:4c:d4:94:91:
e5:28:34:dc:f4:95:72:78:23:8a:12:89:2d:87:c4:
65:c6:4e:bd:e0:fc:02:e2:97:09:42:2f:60:cf:83:
a2:2c:06:a7:79:f5:15:b3:04:02:8c:ca:e1:ec:81:
9e:fa:30:a1:6c:c3:ec:9a:3c:e9:da:6f:53:7a:fc:
94:c6:e9:43:3c:27:7c:2b:37:43:63:a3:87:7e:8c:
b2:5a:2b:ca:d9:99:7e:aa:45:89:9d:3a:a1:21:22:
cf:a0:f3:38:fd:f4:65:bf:b5:18:64:c3:98:68:55:
ae:74:62:6f:7b:27:b6:df:f1:09:2a:f3:da:2d:16:
b9:c5:ad:fa:eb:96:d8:11:7b:b5:b7:ab:8a:7d:db:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:97:9E:04:BF:61:21:8E:8A:E9:90:13:F9:13:04:21:0C:91:24:7C
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/3JeeBL9hIY6K6ZAT-RMEIQyRJHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.140.0/24
Signature Algorithm: sha256WithRSAEncryption
15:31:7b:31:31:d1:14:0a:78:4e:23:0c:bb:3c:4f:9a:fd:c2:
bb:fb:6c:c1:b7:d1:70:5f:1c:a7:3e:81:aa:4a:db:b0:b8:64:
45:53:61:44:67:47:6d:1d:ef:78:ab:9c:63:4a:81:f5:a4:97:
0c:7e:5f:57:3e:90:52:b0:fd:e2:c2:2d:44:36:ca:9c:b4:6d:
38:d8:db:2d:a4:63:97:64:97:74:4d:56:e3:19:dd:85:43:ea:
a3:f8:4a:20:dd:3e:d5:f3:1a:5b:b7:c9:3b:ea:32:99:cd:01:
9c:1a:30:ef:70:0c:bf:f2:c0:c8:df:84:72:6c:c3:d8:8b:d3:
c5:35:6f:32:43:5e:f9:b3:51:5d:e2:db:d5:0f:63:f9:96:68:
fa:b1:4e:3d:d1:97:d4:2a:13:db:9a:7a:fc:7c:a4:41:1c:6c:
0e:8c:90:61:44:9e:d5:0e:4d:73:84:88:96:fb:94:b3:82:27:
19:c4:08:f4:15:5e:ef:d0:0a:79:2c:8c:69:c4:c0:ca:8c:6c:
57:cb:2f:56:68:f7:74:4c:6b:6c:d6:32:0b:fe:46:fb:59:5a:
88:b1:86:53:46:44:c1:52:85:ee:cd:c9:ff:43:64:2d:90:29:
15:bb:00:cd:fe:5f:87:c1:a0:d2:c6:00:c0:4e:00:03:04:b3:
80:47:57:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:55:09 2025 by rpki-client